CVE-2025-32036
DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. The algorithm used to generate the captcha image shows the least complexity of the desired image. For this reason, the created image can be easily read by OCR tools, and the intruder can send automatic requests by building a robot and using this tool. This vulnerability is fixed in 9.13.8.
Scoring
- Severity
- MEDIUM
- CVSS base score
- 4.2
- CVSS vector
- CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N
- EPSS probability
- 0.30%
- CWE
- CWE-804
- Published
- 2025-04-08
- Last modified
- 2026-03-13
Affected products
- dnnsoftware Dnn.Platform
Weakness type
Related vulnerabilities
- CVE-2024-23566 — HCL Aftermarket EPC is vulnerable to brute force attacks since application doesn’t have captcha...
- CVE-2024-23567 — HCL Aftermarket EPC is affected by Sensitive Information in GET method & in URL which allows...
- CVE-2026-13082 — GD::SecurityImage versions through 1.75 for Perl use rand to generate secrets
- CVE-2026-49953 — Discuz! X5.0 CAPTCHA Bypass via Predictable Character Set
- CVE-2026-40935 — WWBN/AVideo has CAPTCHA Bypass via Attacker-Controlled Length Parameter and Missing Token Invalidation on Failure
- CVE-2026-27411 — WordPress SiteGuard WP plugin plugin <= 1.7.9 - Captcha Bypass vulnerability
- CVE-2025-10423 — newbee-mall kaptcha mallKaptcha Captcha
- CVE-2025-8546 — atjiu pybbs Verification Code login Captcha